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roots of F % {X) are g, g p '\ and g~ p . Then the method represents the powers of g using their trace 

over the field GF(p 2 ). The method then selects a private key. The method then computes a 

public key as a function of g and the private key. The public key can be used to encrypt a 

message and the public and private key can be used to decrypt the message. The public arid 

private key can be used for signing a message and the public key can be used for verifying the 

signature. A Diffie-Hellman key exchange or other related scheme can be conducted using the 

public key generated by the method. The resulting invention reduces the bit-length of public 

keys and other messages, thereby reducing the bandwidth requirements of telecommunications 

devices, and reduces the computational effort required to encrypt/decrypt and to generate/verify 

digital signatures. 



DELETE the current Abstract of the Disclosure and INSERT the following: 



Efficient and Compact Subgroup Trace Representation ("XTR") 
Abstract of the Disclosure 

The invention is a method, system, computer program, 1 computer program article of 
manufacture, and business method for providing improvements in key generation and 
cryptographic applications in public key cryptography, by both reducing: 1) the bit-length of 
public keys and other messages, thereby reducing the bandwidth requirements of 
telecommunications devices, such as wireless telephone sets, and 2) the computational effort 
required to generate keys, to encrypt/decrypt and to generate/verify digital signatures. The 
method of the invention determines a public key having a reduced length and a number p, using 
GF(p ) arithmetic to achieve GF(p ) security, without explicitly constructing GF(p ). 

IN THE CLAIMS 

The Applicants respectfully request entry of this Amendment to CANCEL claims 1-24 
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Please CANCEL claims 1-24. 
New Claims 

25. (New) Aunethod of determining a public key having an optionally reduced length and a 
number /?, using (£F(p) or GF(p 2 ) arithmetic to achieve GF(p 6 ) security, without explicitly 
constructing GF(m), comprising: 

selecting a number q and a number p such that p 2 -p + 1 is an integer multiple of q\ 
selecting a mimber g of order q, where g and its conjugates can be represented by B, where 
FgfJQ =X*-BX 2 + W- 1 and the roots are g, g p '\g p ; and 

representing tpe powers of the conjugates of g using their trace over the field GF(p 2 ). 

26. (New) A method of generating a private key, and computing a public key as a function of p, 
q, and B generated by the method of claim 25, and the private key. 

27. (New) A method of encrypting a message using the public key generated by the method of 
claim 26. \ 

28. (New) A method cxf decrypting a message using the public key and the private key generated 
by the method of claim 26. \ 

29. (New) A method of signing a message using the public key and the private key generated by 
the method of claim 26. \ 
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30. (New)lA method of verifying a signature using the public key generated by the method of 
claim 26. 1 

3 1 . (New) A method of key exchange using the public key and the private key generated by the 
method of claim 2p. 

32. (New) A merhod of Diffie-Hellman key exchange and related schemes using p y q, and B as 
generated by the method of claim 25 . 

33. (New) A system W determining a public key having an optionally reduced length and a 
number p, using GF(p) or\GF(p 2 ) arithmetic to achieve GF(p 6 ) security, without explicitly 
constructing GF(p 6 ), comprising: 

a processor for selecting a number q and a number p such that p 2 -p + 1 is an integer 
multiple of q\ I 

said processor selecting a number g of order q, where g and its conjugates can be 
represented by B, where F g (A = X* -BX 2 + B P X- 1 and the roots are g, g p ' } , g p \ and 

said processor representing the powers of the conjugates of g using their trace over the field 



34. (New) A system of generating a private key, and computing a public key as a function of p, 
q, and B generated by the system oftclaim 33, and the private key. 



GF(p 2 ). 
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A system of encrypting a message using the public key generated by the system of 



36. (New)! A system of decrypting a message using the public key and the private key generated 
by the system fof claim 34. 

37. (New) A system of signing a message using the public ken and the private key generated by 
the system of claim 34. 

38. (New) A system of verifying a signature using the public key generated by the system of 
claim 34. \ 

39. (New) A systenAof key exchange using the public key and the private key generated by the 
system of claim 34. \ 

40. (New) A system oflDiffie-Hellman key exchange and related schemes using p, q, and B as 
generated by the system of claim 33. 

4 1 . (New) A computer program article of manufacture, comprising: 

a computer readable medium for determining a public key having an optionally reduced 
length and a number /?, using W(p) or GF(p 2 ) arithmetic to achieve G¥(p 6 ) security, without 
explicitly constructing GF(p 6 ), comprising: 

a computer program means in said computer readable medium, for selecting a number q and 
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a comp iter program means in said computer readable medium, for selecting a number g of 
order q, where £ and its conjugates can be represented by B, where F g (X) = X 3 - BJ^ + i^X- 1 and 
the roots are g, d^" 1 , g p \ and 

a computer program means in said computer readable medium, for representing the powers 
of the conjugateslof g using their trace over the field GF(p 2 ). 



42. (New) Thd article of manufacture of claim 41 , which further comprises: 

a computerlprogram means in said computer readable medium, for generating a private key, 
and computing a public key as a function ofp, q, and 5, and the private key. 



43. (New) The article of manufacture of claim 42, which further comprises: 

a computer program means in said computer readable medium, for encrypting a message 
using the public key. 



a computer 
using the public key 



44. (New) The artjcle of manufacture of claim 42, which further comprises: 

prqgram means in said computer readable medium, for decrypting a message 
the private key. 



ard 



45. (New) The article of manufacture of claim 42, which further comprises: 

a computer program means in said computer readable medium, for signing a message using 
the public key and the private key. 



23867 v2 



Page 6 of 12 



SUPPLEMENTAL PRELE 
' Serial NumBbr: 09/498,716 




ARY AMENDMENT 




Docket Number: 0225-4188 



46. (New) The article of manufacture of claim 42, which further comprises: 

a computer program means in said computer readable medium, for verifying a signature 
using the public key. 

47. (New) Tfte article of manufacture of claim 42, which further comprises: 

a computer program means in said computer readable medium, for performing a key 
exchange using the public key and the private key. 

48. (New) The article of manufacture of claim 41 , which further comprises: 

a computer program means in said computer readable medium, for performing a Diffie- 
Hellman key exchange ©r a related scheme using p, q, and B. 

49. (New) A businesslmethod of determining a public key having an optionally reduced length 
and a number p, using GF(b) or GF(p 2 ) arithmetic to achieve GF(p 6 ) security, without explicitly 
constructing GF(p 6 ), comprising the steps of: 

selecting a number q\md a number p such that p 2 - p + 1 is an integer multiple of q; 
selecting a number g ©f order q, where g and its conjugates can be represented by B, where 
F g (X) = X 3 - BX 2 + ffX- 1 arid the roots are g 9 g p ' ] , g p \ and 

representing the powers of the conjugates of g using their trace over the field GF(p 2 ). 

50. (New) A method of generating a private key, and computing a public key as a function of p, 
q, and B generated by the business\method of claim 49, and the private key. 



23867 v2 



Page 7 of 12 



